OK, so I setup our users as combined WP+TMG (aka FW) clients. The URL filtering works fine. But all users are local admins of their PCs and so can change their registry settings. If they can figure out how to remove their WP settings then TMG client takes
over and the users pass through unfiltered when browsing. This is a terrible loophole IMO. Any suggestions on ways to prevent this (whilst keeping users as admins). Thanks
↧